Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A487A02E3A5B11F0B29B47C5DAE4EC9C.roa
File: A487A02E3A5B11F0B29B47C5DAE4EC9C.roa (raw, json)
Hash identifier: eRijoq+absk4X2+Gm16xQ9F8ZYyU8aEbUywbxZuD/9U=
Subject key identifier: A7:E7:35:6C:A0:57:CE:8D:55:E1:A3:E0:F2:99:BE:A4:29:D8:0B:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A487A02E3A5B11F0B29B47C5DAE4EC9C.roa
Signing time: Mon 26 May 2025 18:02:53 +0000
ROA not before: Mon 26 May 2025 18:02:48 +0000
ROA not after: Tue 26 Aug 2025 18:02:48 +0000
asID: 328608
IP address blocks: 154.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99027 (0x182d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 18:02:48 2025 GMT
Not After : Aug 26 18:02:48 2025 GMT
Subject: CN=6834accd-1b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:2a:34:2f:47:53:ab:54:36:c1:d3:85:10:
ed:33:96:28:e5:45:ac:91:9b:63:f5:7e:bb:46:11:
7e:c7:96:63:34:ed:a3:a9:cc:db:b2:48:b2:6c:7d:
e9:98:6c:76:43:87:45:8f:12:9c:64:e5:3d:0f:e3:
e0:30:95:b4:aa:03:ad:75:9e:0e:51:47:04:65:f2:
d4:8c:bf:bd:93:df:7f:65:9c:eb:36:cd:47:6f:84:
31:05:6a:5b:11:fb:54:91:a3:f1:29:13:81:55:85:
83:46:bc:a3:cf:28:5c:08:a5:6f:43:ee:3d:64:e0:
4b:57:5c:7e:c0:e8:b4:2b:88:bb:ee:b0:f1:50:29:
bd:d6:8c:48:c3:bc:d7:02:85:e7:25:8a:b8:80:62:
5c:ac:32:27:d2:be:dc:1a:0a:3c:85:3f:e1:d9:81:
85:8d:bd:5a:1f:63:4e:74:01:2c:a0:79:e7:11:96:
93:b9:6e:fc:54:21:10:d4:d0:8b:56:24:39:8d:1b:
30:d9:8c:76:9a:f8:fa:8f:79:f6:0c:ef:3a:1b:dd:
d5:ae:20:53:2f:97:f1:f0:af:bd:41:f6:14:41:60:
fc:50:4e:41:bc:c4:6d:47:68:40:7c:32:3b:fc:03:
cd:d6:98:4e:b9:5a:96:1d:22:05:c7:c5:9d:24:ae:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E7:35:6C:A0:57:CE:8D:55:E1:A3:E0:F2:99:BE:A4:29:D8:0B:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A487A02E3A5B11F0B29B47C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:00:9f:9b:9c:19:bc:b5:d5:2a:d4:88:eb:48:42:59:88:91:
cb:d2:58:db:3f:ad:4e:2c:71:7a:9b:25:47:48:ed:43:31:06:
58:d4:36:3b:e3:7f:1d:6e:93:c6:17:d9:63:66:72:3c:5a:66:
4d:10:62:37:5d:6a:03:d4:03:0a:44:40:6f:fb:47:05:d1:1d:
af:4e:60:87:1e:e5:34:03:f1:35:2c:92:23:21:a0:cb:20:8b:
a4:49:a7:50:e6:81:00:06:5e:4a:aa:9e:c4:1d:db:47:ae:ab:
93:a7:c5:40:5e:c7:23:e3:e6:39:fa:47:74:6b:2a:44:93:80:
1d:d7:b5:65:bc:a0:57:30:cf:d3:eb:a0:7d:5f:89:09:b1:12:
fc:63:4f:ae:3d:81:8d:29:c5:54:03:be:e7:db:51:7b:39:24:
00:80:2f:c5:25:05:56:e6:53:e3:2e:29:49:18:62:65:73:ff:
a2:ea:f6:fb:e3:bd:45:ae:31:11:95:cd:bd:58:c2:3c:b4:a1:
5c:eb:4e:4c:1d:5d:e1:f8:cc:7c:b2:72:50:ae:cb:25:58:cf:
ca:35:77:eb:a3:29:a0:fc:dd:83:86:14:37:ed:40:0d:53:81:
9b:8e:da:6b:80:17:2f:89:bf:27:1d:ad:3c:b2:7a:76:47:83:
26:5d:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:16:22 2025 by rpki-client